FEDERALItem 1.05 · mandatoryHackingFinancial ServicesFinanceLife InsuranceCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)EmploymentLowContained

PRUDENTIAL FINANCIAL, INC.

bd_543ce67bdd8ba3e8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 5, 2024

Filed

Feb 21, 2024

To disclose

16 days

Affected

Not disclosed

Linked

13 records

Confidence

83%

Full breach record for PRUDENTIAL FINANCIAL, INC. →22 incidents on file

Prudential Financial filed an 8-K/A amending its Feb 13, 2024 disclosure of a Feb 5, 2024 detection of unauthorized access (beginning Feb 4, 2024) by a suspected cybercrime group. Limited data including some client information and PII, Company administrative/user data, and a small percentage of employee/contractor accounts were accessed and exfiltrated. No malware, ransomware, or data destruction identified. Reported to law enforcement and regulators. No material impact determined.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Feb 13, 2024 → Filed Feb 21, 20248d ✗ SEC 4-day late16 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 16 days

Feb 4, 2024

Begins

Feb 5, 2024

Discovered

Feb 13, 2024

Scope determined

Feb 21, 2024

Filed

vs. sector median

6 wks faster

This filing is one of 13 records about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Hawaii State AGbd_ae0d1296d328e7102024-03-01 · +9dVerified
California State AGbd_36841bd9613d029d2024-03-29 · +37dVerified
Massachusetts State AGbd_b1965b1a8cc9ac482024-03-29 · +37dVerified
Maine State AGbd_eb8d330c9dcc702b2024-03-29 · +37dCandidate

Show 6 more filings ↓up to 93d gap

Delaware State AGbd_f5ee337a95f0f5432024-03-29 · +37dVerified
Maine State AGbd_b3527d1aa38e9c732024-04-01 · +40dVerified
New Hampshire State AGbd_c86a2bebe35007342024-04-01 · +40dVerified
South Carolina State AGbd_56760a94916f39a82024-04-23 · +62dVerified by operator
Washington State AGbd_63338cbe564e28332024-04-23 · +62dVerified
Oregon State AGbd_1b617c45cf572f7a2024-05-24 · +93dVerified

Showing first 10 of 12 linked disclosures.

Name: PRUDENTIAL FINANCIAL, INC.
norm: prudential financial
SEC CIK: 0001137774
Domain: prudential.com

Name: PRUDENTIAL FINANCIAL, INC.
norm: prudential financial
SEC CIK: 0001137774
Domain: prudential.com
Industry: Financial Servicesllm
NAICS 524113 · Direct Life Insurance Carriers

Discovered: Feb 5, 2024
Breach occurred: Feb 4, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: Feb 13, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Employment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported this matter to relevant law enforcementInforming regulatory authorities

During the incident: Activated our cybersecurity incident response process to investigate, contain, and remediate the incident
Engaged external cybersecurity experts
Reported this matter to relevant law enforcement
Informing regulatory authorities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: SEC 4-day late · 8d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Feb 13, 2024
→ Filed: Feb 21, 2024
8d cal. 4 business days SEC 4-day late

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Feb 13, 2024 → Filed: Feb 21, 2024	8d cal.	4 business days	SEC 4-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

SEC 8-KFeb 21 · first · this page

Hawaii State AG+9d

California State AG+37d

Massachusetts State AG+37d

Maine State AG+37d

Delaware State AG+37d

Maine State AG+40d

New Hampshire State AG+40d

South Carolina State AG+62d

Washington State AG+62d

Oregon State AG+93d

Pattern: first filing Feb 21, last May 24 (OR) — a 93-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1137774/000119312524040749/d766318d8ka.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 21, 2024
Raw hash: 812eaa0e09ce6808ad1ea349dd4f251bd68fa9bf37fd924a6621fca879bf044e

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html29.8 KB

Download View at source

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityPRUDENTIAL FINANCIAL, INC.

Victim entityPRUDENTIAL FINANCIAL, INC.

Incidentdiscovered Feb 5, 2024

Stated responseActivated our cybersecurity incident response process to investigate, contain, and remediate the incident

ComplianceSEC 4-day late

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing